Personal Information Protection Statement 个人信息保护声明: Allen & Gledhill

Last updated on 2 November 2023

This is the personal information protection statement (this “Statement”) of Allen & Gledhill LLP (“Allen and Gledhill”) with respect to our processing of Personal Information (as defined below) within or from the territory of the People’s Republic of China (which for the purposes of this Statement, excludes the Hong Kong Special Administrative Region of the PRC, the Macau Special Administrative Region of the PRC, and the Taiwan region) (“PRC”). This Statement explains how we collect, use, share and store your Personal Information, and your rights regarding your Personal Information.

This Statement is intended to help you understand:

What is Personal Information
How we collect and use your Personal Information
How we share, assign, disclose, and entrust other parties to process your Personal Information
How we store your Personal Information
How your Personal Information is protected
Your rights
Protection of minors
How this Statement is updated
How to contact us

Please read the following information carefully to understand our practices regarding your Personal Information and how we treat it. This Statement may be updated from time to time and any amendments or revisions made to this Statement will be published on our website. If you have any questions about this Statement, please contact us using the contact details provided at the bottom.

What is Personal Information

Personal Information means all kinds of information related to identified or identifiable natural persons that are electronically or otherwise recorded, excluding information that has been anonymized.

How we collect and use your Personal Information

Your Personal Information will be collected and used when you contact, communicate, or interact with us, including via the following ways:

Use of the Website or social media accounts: Provision of Personal Information is not required to browse our Website. Where you use, access, or follow our public or official accounts on social media platforms such as WeChat, Weibo, or LinkedIn, we will collect your Personal Information about your account and records of your interactions with us on the respective social media platforms (including your account name, avatar, gender, region, and other public information).

Registration for events: Where you sign up for our online or offline events via the Website or on social media platforms such as WeChat, Weibo, or LinkedIn, such as lectures, seminars, webinars, functions, and on-site visits, we may collect your name, contact information, employer’s name, title, and email address to complete the registration for such events and provide you with event-related information.

Recruitment: Where you submit an application for a position with us, we may collect your basic contact information (including name, email address, and phone number), identity information (including identity card name and number), your curriculum vitae (containing your education and employment history) and other relevant materials for the purpose of screening, assessing, and employing candidates.

Provision of services to you: Due to the international nature of the Allen and Gledhill network, where you have engaged us to provide services to you, your Personal Information may be collected, used and disclosed by our offices, affiliates, service providers and agents worldwide to enable the provision of services to or for you; to enable compliance with applicable laws, regulations, industry codes and guidelines; and for internal audit purposes.

Publications: Where you have requested to be on our mailing list to receive our electronic publications (including bulletins, updates, alerts, reviews, invitations and announcements) via our electronic Subscription Form or otherwise, we will use your Personal Information to send such publications to you. You may cancel the subscription in multiple ways, such as clicking the “unsubscribe” link in our emails or sending an email requesting cancellation to dpo@allenandgledhill.com.

Cookies: We use cookies for web analytics. Disabling cookies in your browser will not affect your user experience.

Exceptions to prior consent for collecting and using Personal Information: Under the following circumstances, your Personal Information may be collected and used without your consent:

The processing is necessary for the conclusion or performance of a contract to which you are party;
The processing is necessary for our performance of legal duties and obligations, such as for the purpose of national safety and defence security, criminal investigation and prosecution, cyber security audit;
The processing is necessary to respond to public health emergencies or for the protection of public security or significant public interests;
The processing is necessary to protect the life, property or other significant legal rights and interests of you or other individuals and it is impracticable to obtain prior consent from you or other individuals;
The Personal Information is collected from legally and publicly disclosed information; or
Other circumstances as stipulated by applicable laws and regulations.

How we share, assign, disclose, and entrust other parties to process your Personal Information

We will not share your information with any company, organization or individual unless: with your explicit consent; as stipulated by applicable laws and regulations, or by the compulsory requirements by the competent authorities; shared with our offices, affiliates, service providers and agents worldwide; shared with our authorized partners who are bound by strict confidentiality and security requirements. We will not transfer your information to any third party, unless with your explicit consent, for example, if you re-assign our services to a third party, we need to transfer the relevant information accordingly. We will disclose your Personal Information only in particular situations: with your explicit consent; or as required by applicable laws and regulations.

How we store your Personal Information

Personal information collected under circumstances set forth in this Statement will in principle be stored within the PRC and will not be transferred overseas, unless it becomes necessary to transfer your Personal Information overseas (such as to share your Personal Information with our offices, affiliates, service providers and agents worldwide). In such event, we will do so in strict compliance with applicable laws and regulations and your Personal Information will be shared only with a limited number of relevant individuals on a need-to-know basis in connection with their job responsibilities.

Unless otherwise permitted by you, your Personal Information will be retained for as long as that is necessary to achieve the purposes for which it was collected and to comply with the applicable data retention policies (including for the purposes of satisfying any legal, accounting or reporting requirements) or as required or permitted by applicable laws and regulations.

How your Personal Information is protected

We understand how important it is to keep your Personal Information safe. We have therefore employed reasonable physical, technical, and administrative measures and safeguards to protect your Personal Information against foreseeable risks, including unauthorized visit and access, public disclosure, improper use, modification, or destruction.

No network can be completely secure due to limitations of technology and risk prevention measures, and we make no guarantees on such security, even though we make every reasonable endeavour to protect your Personal Information. In case of a Personal Information breach or other data security incident, we will initiate our emergency response plan and take measures to contain the situation and minimize any negative consequences to you. If you suspect that your Personal Information is breached, please immediately contact us using the contact details listed under “How to contact us” in this Statement so that we can take corresponding measures.

Your rights

You have the right to access, copy, and correct your Personal Information. If you find any errors in your Personal Information that we processed, you have the right to ask us to make corrections. If you find our processing of Personal Information violates any applicable laws or regulations, or without your consent, you have the right to ask us to delete your Personal Information. You also have the right to change the scope of your authorization. If you withdraw your consent, we will no longer process your Personal Information, but your withdrawal of consent does not have retroactive effect.

You can raise your above requests by contacting us using the contact details listed under “How to contact us” in this Statement and we will generally respond within the legally stipulated time limit. For security reasons, you may be asked to submit the request in writing or prove your identity or in other ways. We may ask you to verify your identity before processing your request.

Protection of minors

Children under 14 years old are not the target audience for the Website. We generally do not intentionally collect, use or disclose Personal Information from such minors except where permitted by applicable laws and regulations, expressly consented to by such minors’ parents/guardians, or necessary for the protection of such minors. Please contact us using the contact details listed under “How to contact us” in this Statement if you believe that we have any Personal Information from any such minors without their parental/guardian consent, we will promptly investigate and remove such Personal Information.

How this Statement is updated

This Statement may be updated from time to time in response to changes in legal, technical, and business conditions. The date on which this Statement was last updated is stated in the “last updated” date” displayed at the top of this Statement. We will not make updates to this Statement in a way that significantly diminishes your rights under the current version without your explicit consent. If you continue to use or access this Website or other social media platforms such as WeChat, Weibo, or LinkedIn or to otherwise interact with us, you are deemed to have acknowledged and accepted the updated Statement.

How to contact us

If you have any enquiries, comments or suggestions about our collection or use of your Personal Information or this Statement, we would be pleased to receive them if you contact our Data Protection Officer by email at dpo@allenandgledhill.com.

If you would like to receive information about the Personal Information we have in relation to you, to update such Personal Information or to withdraw any consent you have provided to us previously, please contact our Data Protection Officer by email at dpo@allenandgledhill.com.

更新于2023年11月2日

本声明为 Allen & Gledhill LLP（以下简称“安盛”）就我们在中华人民共和国（为本声明之目的，不包括中华人民共和国香港特别行政区、中华人民共和国澳门特别行政区及台湾地区）（以下简称“中国”）境内或从中国境内处理个人信息（定义见下文）所作的个人信息保护声明（以下简称“声明”）。本声明解释了我们如何收集、使用、共享及存储您的个人信息，以及您就您的个人信息所享有的权利。

本声明旨在帮助您理解：

什么是个人信息
我们如何收集和使用您的个人信息
我们如何共享、转让、披露及委托他人处理您的个人信息
我们如何存储您的个人信息
我们如何保护您的个人信息
您的权利
未成年人保护
本声明的更新
如何与我们联系

请仔细阅读以下信息，以了解我们就您的个人信息的惯常做法以及我们如何对待您的个人信息。本声明可能会不时更新，对本声明所作的任何修订或修改将会在我们的网站上公布。如您对本声明有任何疑问，请通过底部提供的联系方式与我们联系。

什么是个人信息

个人信息是指以电子或其它方式记录的，与已识别或可识别的自然人有关的各种信息，不包括已匿名处理的信息。

我们如何收集和使用您的个人信息

当您与我们联系、交流或互动时，我们将收集和使用您的个人信息，包括通过以下方式：

本网站或社交媒体账户的使用：浏览本网站无需提供个人信息。如果您在微信、微博或LinkedIn等社交媒体平台上使用、访问或关注我们的公共或官方账户，我们将收集关于您账户的个人信息，以及您在各个社交媒体平台上与我们互动的记录（包括您的账户名称、头像、性别、地区及其他公开信息）。

活动报名：如果您通过本网站或微信、微博或LinkedIn等社交媒体平台报名参加我们的线上或线下活动（例如讲座、研讨会、网络研讨会、招待会和现场参观），我们会收集您的姓名、联系方式、单位名称、职务和电子邮件地址，以便完成该等活动的报名并向您提供与活动相关的信息。

招聘：如果您向我们提交职位申请，我们会收集您的基本联系方式（包括姓名、电子邮件地址和电话号码）、身份信息（包括身份证姓名和号码）、个人简历（包括教育和工作履历）及其他相关材料，以便我们对应聘者进行筛选、评估和聘用。

向您提供服务：由于安盛关系网的国际性，如果您委托我们向您提供服务，我们全球各地的办事处、关联机构、服务提供商和代理人皆可能会收集、使用和披露您的个人信息，以便向您或为您提供服务；以遵守适用的法律法规、行业准则和指引；以及用于内部审计目的。

出版物：如果您通过我们的电子订阅表格或其他方式申请加入我们的邮件列表，以接收我们的电子出版物（包括简报、更新、提示、评论、邀请和公告），我们将使用您的个人信息向您发送该等出版物。您可以通过多种方式取消订阅，例如：点击我们电子邮件中的“取消订阅”链接，或向dpo@allenandgledhill.com发送电子邮件要求取消订阅。

Cookies：我们使用Cookies进行网页分析。在您的浏览器中禁用Cookies不会影响您的用户体验。

收集和使用个人信息需征得事先同意的例外情形：在以下情况下，您的个人信息可能会被收集和使用，而无需您的同意：

处理您的个人信息系为了签订或履行您作为一方当事人的合同所必需的；
处理您的个人信息系为了我们履行法律职责和义务所必需的，例如为了国家安全和国防安全、刑事调查和控告、网络安全审计目的；
处理您的个人信息系为了应对公共卫生突发事件或为了保护公共安全或重大公共利益所必需的；
处理您的个人信息系为了保护您或其他个人的生命、财产或其他重大合法权益，并且无法事先获得您或其他个人的同意；
个人信息是从合法公开披露的信息中收集的；或
适用的法律法规规定的其他情形。

我们如何共享、转让、披露及委托他人处理您的个人信息

我们不会将您的信息与任何公司、组织或个人共享，除非：经您明确同意；根据相关法律法规的规定或主管机关的强制性要求；向我们在全球的办事处、关联机构、服务提供商和代理人共享；向我们受严格保密和安全要求约束的授权合作伙伴共享。除非经您明确同意，我们不会将您的信息传输给任何第三方，例如，在您将我们的服务转托给第三方时，我们需要将相关信息传输给第三方。我们仅在以下情况下才会披露您的个人信息：经您明确同意；或根据适用法律法规的要求。

我们如何存储您的个人信息

在本声明所述情形下收集的个人信息原则上将存储在中国境内，不会传输至境外，除非确有必要将您的个人信息传输至境外（例如与我们在全球的办事处、关联机构、服务提供商和代理人共享您的个人信息）。在此情况下，我们将严格按照适用法律法规的要求进行，且您的个人信息将仅与数量有限的、与其工作职责相关的人士在“须知”基础上进行共享。

除非您另行允许，您的个人信息将被保留直至实现收集您的个人信息的目的并符合适用的数据保留政策（包括为满足任何法律、会计或报告要求），或直至适用法律法规要求或允许的期限。

我们如何保护您的个人信息

我们理解保护您的个人信息安全的重要性。因此，我们已采取合理的物理、技术和管理措施和保护措施以保护您的个人信息免受可预见的风险，包括未经授权的访问和取用、公开披露、不当使用、修改或销毁。

由于技术和风险防范措施的局限性，任何网络都不可能是完全安全的，即使我们已尽最大努力保护您的个人信息，我们也不对该等安全性作出任何保证。当发生您的个人信息泄露或其他数据安全事件时，我们将启动应急预案并采取措施控制局面，将对您造成的不利影响降至最低。如果您怀疑您的个人信息被泄露，请立即通过本声明“如何与我们联系”项下列出的联系方式与我们联系，以便我们采取相应的措施。

您的权利

您有权访问、复制和更正您的个人信息。如果您发现我们处理的您的个人信息有任何错误，您有权要求我们进行更正。如果您发现我们处理个人信息的行为违反了任何适用的法律法规，或未经您的同意，您有权要求我们删除您的个人信息。您还有权改变您的授权范围。如果您撤回您的同意，我们将不再处理您的个人信息，但是您撤回同意的行为不具有追溯力。

您可以通过本声明“如何与我们联系”项下列出的联系方式向我们提出上述要求，我们一般将在法律规定的时间内回复。出于安全考虑，您可能会被要求以书面形式提交请求或以其他方式证明您的身份。在处理您的要求之前，我们可能会要求您验证您的身份。

未成年人保护

14岁以下的儿童不属于本网站的目标受众。通常情况下，我们不会故意收集、使用或披露该等未成年人的个人信息，除非适用的法律法规允许、该等未成年人的父母/监护人明确同意，或出于保护该等未成年人的必要。如果您认为我们在未经其父母/监护人同意的情况下获得了任何该等未成年人的个人信息，请通过本声明“如何与我们联系”项下列出的联系方式与我们联系，我们将及时进行调查并移除该等个人信息。

本声明的更新

本声明可能会根据法律、技术和业务条件的变化而不时更新。本声明的最后更新日期显示在本声明顶部的“最后更新日期”中。未经您的明确同意，我们不会以严重削弱您在当前版本下的权利的方式对本声明进行更新。如果您继续使用或访问本网站或其他社交媒体平台（如微信、微博或 LinkedIn），或以其他方式与我们互动，则被视为您已确认并接受更新后的声明。

如何与我们联系

如果您对我们收集或使用您的个人信息或对本声明有任何疑问、意见或建议，请发送电子邮件至dpo@allenandgledhill.com联系我们的数据保护官。

如果您希望了解我们所掌握的与您相关的个人信息、更新该等个人信息或撤销您之前向我们提供的任何同意，请发送电子邮件至dpo@allenandgledhill.com联系我们的数据保护官。